ipsec: be careful of non existing mac headers
authorEric Dumazet <eric.dumazet@gmail.com>
Thu, 23 Feb 2012 10:55:02 +0000 (10:55 +0000)
committerDavid S. Miller <davem@davemloft.net>
Thu, 23 Feb 2012 21:50:45 +0000 (16:50 -0500)
commit03606895cd98c0a628b17324fd7b5ff15db7e3cd
tree26aab95243f23a5d0cff45ee0d6afd1608afe5df
parent4a2258ddddefeef3291c0fc66437c73d84261a1e
ipsec: be careful of non existing mac headers

Niccolo Belli reported ipsec crashes in case we handle a frame without
mac header (atm in his case)

Before copying mac header, better make sure it is present.

Bugzilla reference:  https://bugzilla.kernel.org/show_bug.cgi?id=42809

Reported-by: Niccolò Belli <darkbasic@linuxsystems.it>
Tested-by: Niccolò Belli <darkbasic@linuxsystems.it>
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/linux/skbuff.h
net/ipv4/xfrm4_mode_beet.c
net/ipv4/xfrm4_mode_tunnel.c
net/ipv6/xfrm6_mode_beet.c
net/ipv6/xfrm6_mode_tunnel.c